Log4j, *the* project that escalated the need for funding open source in the first place, is currently being DOS’d by slop vulnerability reports. Well done everyone. Slow fucking clap.

https://github.com/apache/logging-log4j2/discussions/4052

RE: https://mastodon.social/@kottke/116099037415106961

In addition to being a really great deep dive (on a subject I know all too well...) the interactive data visualizations here are incredible!

- do you want to use google to sign in?
- do you want to add a passkey?
- do you want to add a 2FA token?
- we know you have 2FA but we've sent you an email instead
- this login attempt seems suspicious we've sent you a text about it
- can you click on these buses?
- you failed to click on the buses click on these bicycles instead
- should we save these details for next time?
- do you accept these trackers?
- you can opt out but we've decided it's legitimate interest anyway
- would you like to see a list of our 847 partners we share your data with?
- can we send you desktop notifications?
- can we access your location?
- do you want 10% off for signing up to the mailing list?
- do you want me to translate this page?
- hi I'm your friendly chatbot how can I help?
- oh no you can't buy this, reach out to us for a quote!
- do you want—

I'm tired boss

The #FDroid website has a new banner on top to remind visitors that #Google did not change course and #Android will be locked-down in under 200 days.

If you care about the freedom to control your devices and care about the privacy of you data, please contact your representative and make your voice heard.

https://keepandroidopen.org/ (thanks @marcprux) has the resources to guide you.

We know users will rarely visit the site so the Client(s) will get a banner soon too.

Thank you for your support!